CVE-2024-10286

LocalServer 1.0.9 is affected by a cross-site scripting (XSS) vulnerability that can be exploited by a remote attacker via a crafted request to /testmail/index.php (vulnerable parameter) to steal session details from an authenticated user. The issue stems from improper input handling in the affec...

CVE-2024-10286 Cross-Site Scripting (XSS) vulnerability in LocalServer

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to...

CVE-2024-10286 Cross-Site Scripting (XSS) vulnerability in LocalServer

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to...

LocalServer 跨站脚本漏洞

LocalServer is a web server software for Windows by murdas83 Individual Developer. A cross-site scripting vulnerability exists in LocalServer version 1.0.9, which stems from a cross-site scripting XSS vulnerability that could allow a remote user to send a specially crafted query to an authenticat...

LocalServer 跨站脚本漏洞

LocalServer is a web server software for Windows by murdas83 Individual Developer. A cross-site scripting vulnerability exists in LocalServer version 1.0.9, which stems from a cross-site scripting XSS vulnerability that could allow a remote user to send a specially crafted query to an authenticat...

LocalServer 跨站脚本漏洞

LocalServer is a web server software for Windows from the individual developer murdas83. A cross-site scripting vulnerability exists in LocalServer version 1.0.9, which can be exploited to obtain sensitive information from a user session via the ListName parameter on the /mlss/ForgotPassword page...

LocalServer 跨站脚本漏洞

LocalServer is a web server software for Windows from the individual developer murdas83. A cross-site scripting vulnerability exists in LocalServer version 1.0.9, which can be exploited to obtain sensitive information from a user session via the to parameter on the /testmail/index.php page...

CVE-2024-10287: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ForgotPassword, parameter ListName...

PT-2024-16158 · Unknown · Localserver

Name of the Vulnerable Software and Affected Versions: LocalServer version 1.0.9 Description: A Cross-Site Scripting XSS issue allows a remote user to send a specially crafted query to an authenticated user and steal their session details. This is achieved through the "/testmail/index.php" API...

PT-2024-16161 · Unknown · Localserver

Name of the Vulnerable Software and Affected Versions: LocalServer version 1.0.9 Description: A Cross-Site Scripting XSS issue allows a remote user to send a specially crafted query to an authenticated user, potentially stealing their session details. This is achieved through the...

CVE-2024-10288: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName...

PT-2024-16159

Name of the Vulnerable Software and Affected Versions LocalServer version 1.0.9 Description A Cross-Site Scripting XSS issue allows a remote user to send a specially crafted query to an authenticated user and steal their session details. This is achieved through the "/mlss/ForgotPassword" API...

CVE-2024-10289: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ManageSubscription, parameter MSubListName...

CVE-2024-10286: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to...

PT-2024-16160

Name of the Vulnerable Software and Affected Versions LocalServer version 1.0.9 Description A Cross-Site Scripting XSS issue allows a remote user to send a specially crafted query to an authenticated user, potentially stealing their session details. This is achieved through the...